MSIL/Kryptik.AAOA (file analysis)

The MSIL/Kryptik.AAOA is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/Kryptik.AAOA virus can do?

The binary likely contains encrypted or compressed data.

How to determine MSIL/Kryptik.AAOA?


File Info:
crc32: BFEC175E
md5: ed2074f92b6b66a0679cb47d94308c16
name: ED2074F92B6B66A0679CB47D94308C16.mlw
sha1: 5b50ce89380b618206e3bd4fc6ea96924657c3f8
sha256: 6ea1db252f87c50be810c36e4bd97c56e15a1aa8744de8855591ccaf48afa72f
sha512: 2baa261d8a435169a87cd5084fd588bbb5c484b88de3a5c36cc6fa8ffeaff1d881051ac28f34051f6a00da32f7a892b414fc3130f92906dcf54c8ede364ffcdb
ssdeep: 24576:TU7CI8+QipsxB26pZ0yw1ejJXUr9QnaFo3yRRRRR2C:TqPHu+MjJXuQaF6yRRRRR2C
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2008
Assembly Version: 1.0.0.0
InternalName: IOCompletionCallback.exe
FileVersion: 1.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: A control that is a cross between a TreeView and ListView
ProductName: TreeListView
ProductVersion: 1.0.0.0
FileDescription: TreeListView
OriginalFilename: IOCompletionCallback.exe

MSIL/Kryptik.AAOA also known as:

Elastic	malicious (high confidence)
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_80% (W)
Alibaba	Trojan:Win32/Kryptik.ali2000016
K7GW	Trojan ( 0057b33a1 )
Cyren	W32/MSIL_Kryptik.DZG.gen!Eldorado
Symantec	Trojan.Gen.2
ESET-NOD32	a variant of MSIL/Kryptik.AAOA
APEX	Malicious
Avast	FileRepMetagen [Malware]
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan.MSIL.Injuke.gen
Sophos	Mal/Generic-S
BitDefenderTheta	Gen:NN.ZemsilF.34678.an0@a8aacml
McAfee-GW-Edition	BehavesLike.Win32.Generic.tc
FireEye	Generic.mg.ed2074f92b6b66a0
Emsisoft	Trojan.Agent (A)
SentinelOne	Static AI – Malicious PE
Microsoft	Trojan:Script/Phonzy.B!ml
GData	MSIL.Trojan-Stealer.AgentTesla.P2MJ07
McAfee	Artemis!ED2074F92B6B
Malwarebytes	Malware.AI.4275721012
TrendMicro-HouseCall	TROJ_GEN.R002H07DL21
Rising	Trojan.Injuke!8.10932 (CLOUD)
Ikarus	Win32.Outbreak
Fortinet	MSIL/Kryptik.ZXG!tr
AVG	FileRepMetagen [Malware]
Paloalto	generic.ml
Qihoo-360	Win32/Trojan.Injuke.HwMAv70A

How to remove MSIL/Kryptik.AAOA?

MSIL/Kryptik.AAOA removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X